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(54) Abstract Title 

Network supervisory system where components are Instructed to poll their neighbours to obtain address 
Information 

(57) A network is made up of a number of components 12,13,14 connected by links 16 between ports of the 
components, wherein each component or port has an address. At least some of the components or their have 
means, such as agents, for storing the address of the remote port or component to which they are connected. 
This information can be obtained from messages transmitted into the port from the remote component. 

Where a component eg.13B does not have the addresses.of the remote components eg.12C-E,14 or 
ports to which its ports are connected for all of its ports it "pings" the remote component eg.14 (ie sends it a 
message requesting that it respond with its address information) from the ports lacking remote address 
information. In this way it is ensured that all components which can learn their neighbouring components 
addresses do so. From this data a network map may be constructed. 

A supervisory system 1 1 may control the address gathering and construct the networic map. 




12D Fig. 7 



o 

w 

CO 
CJl 

•vi 



At least one drawing originally filed was informal and the print reproduced here is taken from a later filed formal copy. 
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INTERROGATE AGENTS OF EACH 
COMPONENTTO ESTABLISH WHICH 
PORTS HAVE RECEIVED ADDRESS OF 
REMOTE COMPONENTS OR PORTS TO 

WHICH THEY ARE CONNECTED 



FOR EACH COMPONENT. ESTABLISH 
WHICH PORTS HAVE INCOMPLETE 
ADDRESS INFORMATION 



FOR EACH COMPONENT, FOR EACH OF 

THE PORTS WITH INCOMPLETE 
ADDRESS INFORMATION, REMOTELY 
POLLTHE REMOTE COMPONENTTO 
WHICH IT IS C ONNECTED 

I ~ 
INTERROGATE AGAIN AGENTS OF 
EACH COMPONENT TO ESTABLISH 
ADDRESS OF REMOTE COMPONENTS 
OR PORTS TO WHICH EACH PORT IS 
CONNECTED 



STORE INFORMATION RELATING TO 
COMPONENTS. PORTS AND REMOTE 
PORTS 



ACCESS INFORMATION 



CONVERT INFORMATION INTO FORM 
FOR VISUAL DISPLAY 
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SUPERVISING A NETWORK 
BACKGROUND OF THE INVENTION 

The present invention relates to supervising a network, that is a network of electronic 
components comprising, for example, workstations, personal computers, servers, hubs, 
routers, bridges, switches, (hereinafter referred to as components of the network), and 
links between these components which may be in the form of physical cable or wireless 
links. The network may be a local area network (LAN), wide area network (WAN) or 
other types and may operate in accordance with any desired protocol. 

After such a netwo± has been installed, it is desirable for the person appointed 
network manager to be able to understand the technical operation of the network. 
In known networic management systems, the manner in which the relevant data is 
retrieved from the managed devices, compiled and displayed has been problematic in 
several respects. Firstly, the data received from each of the managed devices is simply 
compfled and displayed as a list of data for the user to interpret. Secondly, the data 
does not provide inforaiation about unmanaged devices. Thirdly, information about a 
given network device, such as the type of device, location of the device on the network 
and operating speed of the device, may be contained in diflferent sections of the 
compiled data. Consequently, conventional systems are cumbersome and difiBcult to 
use. 

GB9910843.3, GB990196I.3, GB9910844.1, GB9910962.1, 

In our co-pending UK patent applications numbers gb9910838.3, gb9910837.5, gb9910839.i, 
GB9910840.9^ (our casc numbeis 2345, 2348, 2349, 2351, 2450, 2451,2455, 2456 ffled 
concurrently herewith) and which are incorporated herein, we describe various 
arrangements for providing automatic interrogation of the network to thereby produce 
a networic map which may be displayed on a visual display unit showing the 
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components and links between the components. At its simplest, and where the 
component is a "managed" component, this is usuaDy provided by interrogation using 
a known protocol, such as the SNMP protocol, of the so-called 'agent' of each 
component which stores the components unique MAC address, the type of component 
and the MAC addresses the components which are conneaed to the ports directly or 
indirectly. 

However, the agent of each component can only store the MAC address of the remote 
component (or the port address) to which a particular port is connected after it has 
received a signal originating from that remote component which includes the relevant 
address. Data signals usually carry both source and destination addresses but until the 
source address is received, it cannot be stored by the agent. In particular operations of 
the network, source address headed data may generally only pass in one direction. 
Thus there will be a numb^ of ports which will not have received a signal sourced 
from the remote component to which they are attached and which therefore will not 
know the MAC address of that remote component. As a result, it is impossible to 
provide a network map or deduce properly the topology of the network as it is 
necessary to know which ports of which component are attached to each other. 

The present invention seeks to address this problem. 

It should also be noted that some components (usually switches and hubs) use the 
component address as a source address whereas other components (such as routers) 
use the port address as the sourced address. 

SUMMARY OF THE INVENTION 

The present invention provides A method of supervdsing a network, which network 
comprises a plurality of components having ports, at least some of which ports are 



. connected by links to ports on other components, at least one component including an 
agent to ascertain the source addresses of the remote component or port to which 
each of its ports is connected when data is received from the relevant remote 
component, said method comprising: 

interrogating said at least one component to establish which ports of the 
component have received the source address of the relevant remote component or its 
port to which they are connectedljy a link directly or indirectly; 
and in respect of at least one of the other ports of said component, remotely polling the 
remote component to which it is connected via said port to cause said remote 
component to return a data signal including the address to that port, whereby the 
source address of the relevant remote component or its port can be identified. 

The present invention also provides network sup^vising apparatus for supervising a 
network comprising a plurality of components having ports, at least some of which 
ports are connected by links to ports on other components, at least one component 
including an agent to ascertain the source addresses of the port of the remote 
component or port to which each of its ports is connected when data is received from 
the relevant remote component, said apparatus comprising: 

a processor unit to interrogate said at least one component to establish which . 
ports of the component have received the source address of the relevant remote 
component or its port to which they are connected by a link; 

and in respect of at least one of the other ports of said component, to remotely poll the 
remote component to which it is connected via said port to cause said remote 
component to return a data signal including the address to that port, whereby the 
source address of the relevant remote component or its port can be identified. 

The present invention also provides a computer program on a computer readable 
medium for us in supervising a network comprises a plurality of components having 
ports, at least some of which ports are connected by links to ports on other 



components, at least one component including as agent to ascertain the source 
addresses of the port of the remote component or port to T^ch each of its ports is 
connected when data is received from the relevant remote component, said program 
comprising: 

program means for interrogating said at least one component to establish which 
ports of the component have received the source address of the relevant remote 
' component or its port to which they are connected by a link; 

program means for causing, in respect of at least one of the other ports of said 
component, remote polling of the remote component which is connected via said port 
to cause said remote component to return a data signal including the address to that 
port; 

and program means to thereby identify the source address of the relevant 
rCTiote component or its port. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Preferred embodiments of the invention will now be described by way of example only 
with reference to the accompanying drawings in which:- 

Figure 1 is a diagrammatic view of a network incorporating a preferred embodiment of 
the invention. 

Figure 2 is a detail of part of the network, and 
Figure 3 sets out details of the program steps. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

Referring to Figure 1 there is shown a network 10 comprising a plurality of 
components in the form of a network supervisor's workstation or computer 11, other 
workstations 12B - E, hubs 13A, 13B, and switch 14. The network is a sinq)le 



network and is set out for purposes of illustration only. Other configurations and 
arrangements, may be used. 

The components are connected together by means of links 16A - H which may be hard 
wired and utilise any desired protocol, and link 16F which is a wireless link. 

' The network supervisor's workstation includes, in addition to a visual display unit 1 8, 
a central processing unit or signal processor 19, a selector which may be in the form of 
a mouse 22, a program store 21 which may comprise, for example, a CD drive, a 
floppy disk drive or a zip drive, and a memory 17 for storing a program which may 
have been loaded from the program store 2 1 or downloaded for example via Internet 
from a website. 

By means which is disclosed in the co-pending patent applications referred to above, 
the network supervisor's computer 1 1 may interrogate and analyse the network, and 
store in the memory 17 the information relating to the components within the network 
and the links between the components. In essence, most quality components include a 
so-called agent which stores information about the component such as its unique MAC 
number, its ID which identifies what the component is and what model type it is, how 
many ports it has and how they are connected directly or indirectly, and the address to 
which at least some of the ports are connected The computer 1 1 interrogates the 
agents of each component. 

In order to clearly understand the invention it is necessary to understand a Uttle more 
about the agent in managed components and the ports in those components. In 
managed components, each component or port will have a unique address. When that 
port directly communicates with another component (le provides information 
originating with that port or its component - not simply forwarding or switching a 
signal recaved firom elsewhere) it will forward its address to that component, (ie the 



source address - it forms part of the header of the data signal). Thus in the part of the 
network illustrated in Figure 2, component M is connected by a link to component A, 
and component A is connected by links to components B and C, (for the purpose of 
this explanation we are ignoring other parts of the network). A, B and C are switches 
and M is a management station (eg the network supervisor's computer 11). Typically, 
M will be the only component to directly communicate with A, B and C, (interrogating 
them for management information). Consequently, packets that have as a source 
address A, B or C will always be going in the direction of M. This means that A will 
leain the addresses of B and C, but B and C will not leam the address of A. 

In order to determine the topology of the network it is necessary to interrogate each 
managed component to establish for each port, the MAC address of the remote 
component or port to which it is connected. However, as set out above, components 
B and C will not know the address of A because data originating from A has not 
passed in that direction. 

It is thus impossible to accurately construct a network tree with any degree of certainly 
in this situation because some of the information is missing. This situation arises in a 
switched environment where data commonly passes in one direction only rather than a 
shared environment in which packets of data are forwarded on all ports. 

The present invention provides an arrangement to deal with this problem. During the 
initial interrogation phase when the computer M is interrogating all of the components 
of the network so as to determine their interconnections and to produce a network 
tree, it will interrogate the agent of each component which in the case of B and C will 
have incomplete information, that is, it will not know the address of A. In order to 
force B and C to learn the MAC addresses of A, we use remote poll (PING). By 
remote polling, one effectively drives the remote component to send a signal back to 
oneself This can be done selectively in order to obtain just enough information to 



build the tree. In the example shown in Figure 2, it will be sufficient to direct B to 
PING A and for C to PING A. 



In essence, M will access the agent of component A, to determine that A is connected 
to B and C. It will then interrogate the agent of B, determine that the component to 
which it is connected is undetermined, the program will cause B to PING A thereby 
causmg it to return a signal to B at which point the agent of B will be able to determine 
' the address A to which Bis connected. A shnilar procedure is carried out with regard 
to component C. 

There are cases where the relevant port of a managed component does not in fact 
remember addresses or that address function has been switched ofiF. Therefore the port 
will never learn the MAC addresses of any of the other managed components. 

In such a case, if the component meets the following three criteria: 

1 . address learning is disabled on one port only, 

2. remote poll is successful between that component and a second 
component, 

3. the component still does not learn the MAC address of the second 
component. 

then it can be assumed that it must be the non-learning port that is linked directly or 
indirectly to the second component. This can be used in estabUshing the topology of 
the network. 

We have described how the network may be supervised. The method of the invention 
may be carried out under the control of the network supervisor's workstation or 
computer and in particular by means of a program controlling the signal processor 



apparatus of that computer or elsewhere in the system. 

The program for controlling the operation of the invention may be provided on a 
computer readable medium, such as a CD, or a floppy disk, or a zip drive disk carrying 
the program or their equivalent, or may be provided on a computer or computer 
memory canying the website o^ for example, the supplier of the network products. 
The program may be downloaded from whichever appropriate source and used to 
control the processor to carry out the steps of the invention as described. 

The program may include (see Figure 3), 

program means (100) for interrogating said at least one conq)onent to establish which 
ports of the component have an address of a remote component to which they are 
attached by a Imk, 

program means (101) for establishing, for each component, which ports have 
incomplete address information, 

program means (102) for causing, in respect of these ports with incomplete address 
information, remote polling of the remote component via the relevant port to cause 
said remote component to return a data signal with source address to that port, 
program means (103) for interrogating the component again to establish the addresses 
of the remote component or ports to which each port is connected, 
program means (104) to cause the information to be stored, 
program means (105) to access that information, and 
program means (106) to convert the information into a form for visual display. 

The invention is not restricted to the details of the foregoing example. 
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CLAIMS 



1 . A method of supervising a network, which network comprises a phiraiity of 
components having ports, at least some of which ports are connected by links to ports 
on other components, at least one component including an agent to ascertain the 
source addresses of the remote component or port to which each of its ports is 
connected when data is received firom the relevant remote component, said method 
comprising: 

interrogating said at least one component to establish which ports of the 
component have received the source address of the relevant remote component or its 
port to which they are connected by a link; 

and in respect of at least one of the other ports of said component, remotely polling the 
rCTiote component to which it is cormected via said port to cause said remote 
component to return a signal mcluding the address to that port, whereby the source 
address of the relevant remote component or its port can be identified. 

2. A method as claimed in claim 1 m which remote polling is carried out in respect 
of all of said other ports of said component. 

3. A method as claimed in claim 1 or claim 2 including deducing the topology of 
the network including the links between each component by identifying the addresses 
of the components or ports to which each port of each component is connected. 

' 4. A method as claimed in any of claims 1 to 3 in which, after remote polling, the 
port does not store an address, determining that a non-learning port is connected to the 
remote component. 

5 . Network supervising apparatus for supervising a network comprising a 
plurality of components having ports, at least some of which ports are connected by 



links to ports on other components, at least one component including an agent to 
ascertain the source addresses of the port of the remote component or port to which 
each of its ports is connected when data is received from the relevant remote 
component, said apparatus comprising: 

a processor unit to interrogate said at least one component to establish which 
ports of the component have received the source address of the relevant remote 
component or its port to which they are connected by a link; 

and in respect of at least one of the other ports of said component, to remotely poll the 
remote component to which it is connected via said port to cause said remote 
conq)onent to return a signal including the address to that port, whereby the source 
address of the relevant remote component or its port can be identified. 

6. ^paratus as claimed in claim 5 in which the processor unit carries out remote 
polling in respect of all of said other ports of said component. 

7. Apparatus as clauned in claim 5 or claim 6 in which the processor unit deduces 
the topology of the network including the links between each component by identifying 
the addresses of the components or ports to which each port of each component is 
connected. 

8. if^paratus as claimed in any of claims 5 to 7 in which, the processor unit, after 
remote polling, determines that the remote component is coimected to a non-learning 
port if the port does not store an address. 

9. A computer program on a computer readable medium, said computer program 
comprising software for performing the steps of any of claims 1 to 4. 

10. A computer program on a computer readable medium for us in supervising a 
network comprises a plurality of components having ports, at least some of which 
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ports are connected by links to ports on other components, at least one component 
including as agent to ascertain the source addresses of the port of the remote 
component or port to which each of its ports is connected when data is received fix>m 
the relevant remote component, said program conq>rising: 

program means for interrogating said at least one component to estabUsh which 
ports of the component have received the source address of the relevant remote 
component or its port to which tfiey are connected by a link; 

program means for causing, in respect of at least one of the other ports of said 
component, remote polling of the remote component which is connected via said port 
to cause said remote component to return a signal including the address to that port; 

and program means to thereby identify the source address of the relevant 
remote component or its port. 

11. A computer program as claimed in claim 10 in which gemote polling is carried 
out in respect of all of said other ports of said component. 

12. A computer program as claimed in claim 10 or claim 1 1 inchiding program 
means to deduce the topology of the network mcludmg the links between each 
component by idratifying the addresses of the components or ports to which each port 
of each component is connected directly or indirectly. 

13. A computer program as claimed in any of claims 10 to 12 including program 
means to determine that the remote component to which that port is attached is 
connected to a non-learning port ifi after remote polling, the port does not store an 
address. 
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